$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a12016c-1711-34ef-8f47-dffc673ee2f9.roa File: 2a12016c-1711-34ef-8f47-dffc673ee2f9.roa (raw, json) Hash identifier: Iz7sUPO/guXu4Fho0MVyfHMl/tRq5RfGNjkYf8YajCo= Subject key identifier: A9:7F:C8:D2:20:9C:A2:44:55:C2:28:7E:A3:9E:86:79:07:A0:50:5B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20673575F3116767AB3FA650 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a12016c-1711-34ef-8f47-dffc673ee2f9.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 174.68.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:35:75:f3:11:67:67:ab:3f:a6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=75795095-ef04-448e-83bc-c58eeadb58fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:25:47:9c:b3:51:a3:3c:18:c5:1e:71:52:f1: 19:0a:59:27:b0:11:43:0f:06:da:32:dd:28:42:f6: 89:2e:38:bf:3a:d9:ec:25:0a:bb:42:bc:c4:87:64: c6:3c:a5:f6:a5:34:db:8d:d4:60:36:0f:07:ec:74: aa:7e:e5:e1:97:e8:75:aa:67:fd:41:e4:3a:eb:22: c6:7f:75:03:df:e3:ff:93:23:c6:74:0a:5a:24:af: cf:81:16:04:67:bd:92:53:85:e7:ac:14:1c:9b:24: cf:41:b3:7b:80:8d:92:23:9a:7e:ed:90:eb:c8:d9: 1f:8b:5a:f9:5d:5a:4b:c5:24:3d:f0:5f:ff:dd:21: 59:69:d0:21:67:8e:ac:bd:b5:43:c4:6f:1b:16:c8: 01:b5:3e:77:62:dd:b0:41:5a:a1:d7:3b:f2:9c:25: 2e:75:eb:d2:d3:f4:f5:61:ba:36:1a:ed:07:6d:04: 02:52:fd:9c:e9:50:af:d0:a9:02:81:40:08:21:cf: 1c:f6:4e:dd:66:ef:d9:4b:ec:77:e5:54:97:ab:f1: 13:83:bf:cb:58:57:4c:d1:a6:b9:94:5a:8d:be:6b: aa:ed:b5:4f:cc:33:c3:b5:e7:21:4a:e2:ad:ff:b8: db:cf:3a:5d:5e:b6:8a:6d:ab:2d:eb:60:6c:c6:8d: 98:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7F:C8:D2:20:9C:A2:44:55:C2:28:7E:A3:9E:86:79:07:A0:50:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a12016c-1711-34ef-8f47-dffc673ee2f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8d:89:36:8f:99:b7:82:fd:74:80:6e:b4:0e:af:bc:85:9a: 7e:7e:31:15:b8:d3:0d:2b:28:11:fd:1a:4d:d5:bd:ab:bb:12: 1a:6c:14:ae:f0:af:36:38:90:2a:bf:91:89:2f:fc:cd:d0:9b: 40:09:65:49:50:b9:08:75:38:70:09:a0:1e:87:c2:ed:af:37: 5d:dd:9c:cb:bc:6d:e4:c7:e8:76:f2:1b:97:84:dc:46:50:9a: 36:44:a8:81:5e:3b:b2:37:12:47:85:12:40:14:72:f4:0f:16: 14:6b:7a:46:87:6a:54:23:4d:d0:77:38:a3:93:8a:7f:76:23: 19:d2:da:39:77:af:85:6c:2c:0a:47:a8:92:7c:78:52:db:37: 42:1b:fd:0b:c8:c3:c0:b0:93:5d:7f:c6:2f:c4:84:b9:71:08: 8b:a6:45:64:fc:f0:5b:c1:a8:c4:c9:97:4c:a4:03:d3:83:18: f5:bd:24:d0:f5:f2:91:04:a9:8a:2e:46:1e:46:6d:13:1d:28: cd:6d:63:bb:36:4b:e5:54:d5:27:d7:2e:96:5f:46:d2:77:05: 2f:4d:4a:7a:f8:2a:2d:20:0b:a0:89:3a:23:c5:20:8a:95:04: a0:c8:ac:eb:77:c0:69:8c:b1:75:bd:ac:c4:75:38:8d:55:92: 23:a0:39:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZzV18xFnZ6s/plAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NzU3OTUwOTUtZWYwNC00NDhlLTgzYmMtYzU4ZWVhZGI1OGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CVHnLNRozwYxR5xUvEZClknsBFDDwbaMt0o QvaJLji/OtnsJQq7QrzEh2TGPKX2pTTbjdRgNg8H7HSqfuXhl+h1qmf9QeQ66yLG f3UD3+P/kyPGdApaJK/PgRYEZ72SU4XnrBQcmyTPQbN7gI2SI5p+7ZDryNkfi1r5 XVpLxSQ98F//3SFZadAhZ46svbVDxG8bFsgBtT53Yt2wQVqh1zvynCUudevS0/T1 Ybo2Gu0HbQQCUv2c6VCv0KkCgUAIIc8c9k7dZu/ZS+x35VSXq/ETg7/LWFdM0aa5 lFqNvmuq7bVPzDPDtechSuKt/7jbzzpdXraKbast62Bsxo2YcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl/yNIgnKJEVcIofqOehnkHoFBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmExMjAxNmMtMTcxMS0z NGVmLThmNDctZGZmYzY3M2VlMmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkSsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqNiTaPmbeC/XSAbrQOr7yFmn5+MRW40w0rKBH9Gk3Vvau7EhpsFK7w rzY4kCq/kYkv/M3Qm0AJZUlQuQh1OHAJoB6Hwu2vN13dnMu8beTH6HbyG5eE3EZQ mjZEqIFeO7I3EkeFEkAUcvQPFhRrekaHalQjTdB3OKOTin92IxnS2jl3r4VsLApH qJJ8eFLbN0Ib/QvIw8Cwk11/xi/EhLlxCIumRWT88FvBqMTJl0ykA9ODGPW9JND1 8pEEqYouRh5GbRMdKM1tY7s2S+VU1SfXLpZfRtJ3BS9NSnr4Ki0gC6CJOiPFIIqV BKDIrOt3wGmMsXW9rMR1OI1VkiOgOeE= -----END CERTIFICATE-----Generated at Wed Oct 15 23:34:54 2025 by rpki-client